@n8n/decorators 1.37.2 → 1.38.1

package/dist/execution-lifecycle/lifecycle-metadata.d.ts

@@ -22,7 +22,7 @@ export type WorkflowExecuteBeforeContext = {
     type: 'workflowExecuteBefore';
     workflow: IWorkflowBase;
     mode: WorkflowExecuteMode;
-    workflowInstance: Workflow;
+    workflowInstance: Workflow | undefined;
     executionData?: IRunExecutionData;
     executionId: string;
 };

package/dist/execution-lifecycle/lifecycle-metadata.js.map

@@ -1 +1 @@
-{"version":3,"file":"lifecycle-metadata.js","sourceRoot":"","sources":["../../src/execution-lifecycle/lifecycle-metadata.ts"],"names":[],"mappings":";;;;;;;;;AAAA,gCAAkC;AA0F3B,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAAvB;QACW,aAAQ,GAAuB,EAAE,CAAC;IASpD,CAAC;IAPA,QAAQ,CAAC,OAAyB;QACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,WAAW;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;CACD,CAAA;;4BAVY,iBAAiB;IAD7B,IAAA,YAAO,GAAE;GACG,iBAAiB,CAU7B"}
+{"version":3,"file":"lifecycle-metadata.js","sourceRoot":"","sources":["../../src/execution-lifecycle/lifecycle-metadata.ts"],"names":[],"mappings":";;;;;;;;;AAAA,gCAAkC;AA2F3B,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAAvB;QACW,aAAQ,GAAuB,EAAE,CAAC;IASpD,CAAC;IAPA,QAAQ,CAAC,OAAyB;QACjC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,WAAW;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;CACD,CAAA;;4BAVY,iBAAiB;IAD7B,IAAA,YAAO,GAAE;GACG,iBAAiB,CAU7B"}

package/dist/index.d.ts

@@ -14,6 +14,7 @@ export * from './policy-check';
 export * from './pubsub';
 export { Redactable } from './redactable';
 export * from './shutdown';
+export * from './system-task';
 export * from './module/module-metadata';
 export type { TimedOptions } from './timed';
 export { Timed } from './timed';

package/dist/index.js

@@ -34,6 +34,7 @@ __exportStar(require("./pubsub"), exports);
 var redactable_1 = require("./redactable");
 Object.defineProperty(exports, "Redactable", { enumerable: true, get: function () { return redactable_1.Redactable; } });
 __exportStar(require("./shutdown"), exports);
+__exportStar(require("./system-task"), exports);
 __exportStar(require("./module/module-metadata"), exports);
 var timed_1 = require("./timed");
 Object.defineProperty(exports, "Timed", { enumerable: true, get: function () { return timed_1.Timed; } });

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,yDAAuC;AACvC,+CAA6B;AAC7B,4CAA0B;AAC1B,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AACjB,wDAAsC;AACtC,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AACjB,iDAA+B;AAC/B,kDAAgC;AAChC,0DAAwC;AACxC,wDAAsC;AACtC,2CAAyB;AACzB,+CAA6B;AAC7B,iDAA+B;AAC/B,2CAAyB;AACzB,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AACnB,6CAA2B;AAC3B,2DAAyC;AAEzC,iCAAgC;AAAvB,8FAAA,KAAK,OAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AAAA,yDAAuC;AACvC,+CAA6B;AAC7B,4CAA0B;AAC1B,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AACjB,wDAAsC;AACtC,uCAAsC;AAA7B,oGAAA,QAAQ,OAAA;AACjB,iDAA+B;AAC/B,kDAAgC;AAChC,0DAAwC;AACxC,wDAAsC;AACtC,2CAAyB;AACzB,+CAA6B;AAC7B,iDAA+B;AAC/B,2CAAyB;AACzB,2CAA0C;AAAjC,wGAAA,UAAU,OAAA;AACnB,6CAA2B;AAC3B,gDAA8B;AAC9B,2DAAyC;AAEzC,iCAAgC;AAAvB,8FAAA,KAAK,OAAA"}

package/dist/multi-main/multi-main-metadata.d.ts

@@ -1,11 +1,9 @@
+import { ReplayableRegistry } from '../replayable-registry';
 import type { EventHandler } from '../types';
 export declare const LEADER_TAKEOVER_EVENT_NAME = "leader-takeover";
 export declare const LEADER_STEPDOWN_EVENT_NAME = "leader-stepdown";
 export type MultiMainEvent = typeof LEADER_TAKEOVER_EVENT_NAME | typeof LEADER_STEPDOWN_EVENT_NAME;
 export type MultiMainEventHandler = EventHandler<MultiMainEvent>;
-export declare class MultiMainMetadata {
-    private readonly handlers;
-    private onRegister?;
-    register(handler: MultiMainEventHandler): void;
-    subscribe(listener: (handler: MultiMainEventHandler) => void): void;
+export declare class MultiMainMetadata extends ReplayableRegistry<MultiMainEventHandler> {
+    constructor();
 }

package/dist/multi-main/multi-main-metadata.js

@@ -5,31 +5,23 @@ var __decorate = (this && this.__decorate) || function (decorators, target, key,
     else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
     return c > 3 && r && Object.defineProperty(target, key, r), r;
 };
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.MultiMainMetadata = exports.LEADER_STEPDOWN_EVENT_NAME = exports.LEADER_TAKEOVER_EVENT_NAME = void 0;
 const di_1 = require("@n8n/di");
-const n8n_workflow_1 = require("n8n-workflow");
+const replayable_registry_1 = require("../replayable-registry");
 exports.LEADER_TAKEOVER_EVENT_NAME = 'leader-takeover';
 exports.LEADER_STEPDOWN_EVENT_NAME = 'leader-stepdown';
-let MultiMainMetadata = class MultiMainMetadata {
+let MultiMainMetadata = class MultiMainMetadata extends replayable_registry_1.ReplayableRegistry {
     constructor() {
-        this.handlers = [];
-    }
-    register(handler) {
-        this.handlers.push(handler);
-        this.onRegister?.(handler);
-    }
-    subscribe(listener) {
-        if (this.onRegister) {
-            throw new n8n_workflow_1.UnexpectedError('A listener is already subscribed to handler registrations');
-        }
-        this.onRegister = listener;
-        for (const handler of this.handlers)
-            listener(handler);
+        super('multi-main event handler', ({ eventHandlerClass, methodName }) => `${eventHandlerClass.name}.${methodName}`);
     }
 };
 exports.MultiMainMetadata = MultiMainMetadata;
 exports.MultiMainMetadata = MultiMainMetadata = __decorate([
-    (0, di_1.Service)()
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [])
 ], MultiMainMetadata);
 //# sourceMappingURL=multi-main-metadata.js.map

package/dist/multi-main/multi-main-metadata.js.map

@@ -1 +1 @@
-{"version":3,"file":"multi-main-metadata.js","sourceRoot":"","sources":["../../src/multi-main/multi-main-metadata.ts"],"names":[],"mappings":";;;;;;;;;AAAA,gCAAkC;AAClC,+CAA+C;AAIlC,QAAA,0BAA0B,GAAG,iBAAiB,CAAC;AAC/C,QAAA,0BAA0B,GAAG,iBAAiB,CAAC;AAOrD,IAAM,iBAAiB,GAAvB,MAAM,iBAAiB;IAAvB;QACW,aAAQ,GAA4B,EAAE,CAAC;IAuBzD,CAAC;IAnBA,QAAQ,CAAC,OAA8B;QACtC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC5B,IAAI,CAAC,UAAU,EAAE,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAQD,SAAS,CAAC,QAAkD;QAC3D,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,8BAAe,CAAC,2DAA2D,CAAC,CAAC;QACxF,CAAC;QAED,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC;QAC3B,KAAK,MAAM,OAAO,IAAI,IAAI,CAAC,QAAQ;YAAE,QAAQ,CAAC,OAAO,CAAC,CAAC;IACxD,CAAC;CACD,CAAA;;4BAxBY,iBAAiB;IAD7B,IAAA,YAAO,GAAE;GACG,iBAAiB,CAwB7B"}
+{"version":3,"file":"multi-main-metadata.js","sourceRoot":"","sources":["../../src/multi-main/multi-main-metadata.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAkC;AAElC,gEAA4D;AAG/C,QAAA,0BAA0B,GAAG,iBAAiB,CAAC;AAC/C,QAAA,0BAA0B,GAAG,iBAAiB,CAAC;AAOrD,IAAM,iBAAiB,GAAvB,MAAM,iBAAkB,SAAQ,wCAAyC;IAC/E;QACC,KAAK,CACJ,0BAA0B,EAC1B,CAAC,EAAE,iBAAiB,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,GAAG,iBAAiB,CAAC,IAAI,IAAI,UAAU,EAAE,CAChF,CAAC;IACH,CAAC;CACD,CAAA;;4BAPY,iBAAiB;IAD7B,IAAA,YAAO,GAAE;;GACG,iBAAiB,CAO7B"}

package/dist/policy-check/index.d.ts

@@ -1,2 +1,3 @@
 export { PolicyCheck, PolicyCheckMetadata, UnknownEnforcementPointError, } from './policy-check-metadata';
 export * from './policy-check';
+export * from './policy-cleared';

package/dist/policy-check/index.js

@@ -20,4 +20,5 @@ Object.defineProperty(exports, "PolicyCheck", { enumerable: true, get: function
 Object.defineProperty(exports, "PolicyCheckMetadata", { enumerable: true, get: function () { return policy_check_metadata_1.PolicyCheckMetadata; } });
 Object.defineProperty(exports, "UnknownEnforcementPointError", { enumerable: true, get: function () { return policy_check_metadata_1.UnknownEnforcementPointError; } });
 __exportStar(require("./policy-check"), exports);
+__exportStar(require("./policy-cleared"), exports);
 //# sourceMappingURL=index.js.map

package/dist/policy-check/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/policy-check/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AASA,iEAIiC;AAHhC,oHAAA,WAAW,OAAA;AACX,4HAAA,mBAAmB,OAAA;AACnB,qIAAA,4BAA4B,OAAA;AAE7B,iDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/policy-check/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;AASA,iEAIiC;AAHhC,oHAAA,WAAW,OAAA;AACX,4HAAA,mBAAmB,OAAA;AACnB,qIAAA,4BAA4B,OAAA;AAE7B,iDAA+B;AAC/B,mDAAiC"}

package/dist/policy-check/policy-brand.d.ts

@@ -0,0 +1 @@
+export declare const brand: unique symbol;

package/dist/policy-check/policy-brand.js

@@ -0,0 +1,5 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.brand = void 0;
+exports.brand = Symbol('policyCleared');
+//# sourceMappingURL=policy-brand.js.map

package/dist/policy-check/policy-brand.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-brand.js","sourceRoot":"","sources":["../../src/policy-check/policy-brand.ts"],"names":[],"mappings":";;;AAMa,QAAA,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC"}

package/dist/policy-check/policy-check.d.ts

@@ -1,5 +1,7 @@
+import type { PolicyCheckFailure, PolicyViolation } from '@n8n/api-types';
 import type { Constructable } from '@n8n/di';
 import type { INode } from 'n8n-workflow';
+export type { PolicyViolation, PolicyCheckFailure };
 export declare const ENFORCEMENT_POINTS: readonly ['workflowSave', 'workflowPublish', 'workflowStart', 'workflowTransfer', 'credentialDecrypt', 'contentImport'];
 export type EnforcementPoint = (typeof ENFORCEMENT_POINTS)[number];
 export type PolicedWorkflow = {
@@ -37,23 +39,10 @@ export type ContentImportContext = {
     readonly workflow: PolicedWorkflow;
     readonly projectId: string | null;
 };
-export type PolicyViolation = {
-    kind: string;
-    checkId: string;
-    message: string;
-    subject?: string;
-    subjectType?: string;
-    scope?: string;
-    matchedRuleId?: string;
-};
 export type PolicyVersionRef = {
     scope: string;
     version: number;
 };
-export type PolicyCheckFailure = {
-    checkId: string;
-    correlationId: string;
-};
 export type PolicyCheckResult = {
     violations: PolicyViolation[];
     policyVersions?: PolicyVersionRef[];

package/dist/policy-check/policy-check.js.map

@@ -1 +1 @@
-{"version":3,"file":"policy-check.js","sourceRoot":"","sources":["../../src/policy-check/policy-check.ts"],"names":[],"mappings":";;;AAUa,QAAA,kBAAkB,GAAG;IACjC,cAAc;IACd,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,mBAAmB;IACnB,eAAe;CACN,CAAC;AAkNE,QAAA,yBAAyB,GAElC;IACH,YAAY,EAAE,gBAAgB;IAC9B,eAAe,EAAE,mBAAmB;IACpC,aAAa,EAAE,iBAAiB;IAChC,gBAAgB,EAAE,oBAAoB;IACtC,iBAAiB,EAAE,qBAAqB;IACxC,aAAa,EAAE,iBAAiB;CAChC,CAAC;AAUK,MAAM,mBAAmB,GAAG,CAAC,KAA4B,EAAsB,EAAE,CACvF,QAAA,kBAAkB,CAAC,MAAM,CACxB,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,QAAA,yBAAyB,CAAC,KAAK,CAAC,CAAC,KAAK,UAAU,CACxE,CAAC;AAHU,QAAA,mBAAmB,GAAnB,mBAAmB,CAG7B"}
+{"version":3,"file":"policy-check.js","sourceRoot":"","sources":["../../src/policy-check/policy-check.ts"],"names":[],"mappings":";;;AAaa,QAAA,kBAAkB,GAAG;IACjC,cAAc;IACd,iBAAiB;IACjB,eAAe;IACf,kBAAkB;IAClB,mBAAmB;IACnB,eAAe;CACN,CAAC;AA6KE,QAAA,yBAAyB,GAElC;IACH,YAAY,EAAE,gBAAgB;IAC9B,eAAe,EAAE,mBAAmB;IACpC,aAAa,EAAE,iBAAiB;IAChC,gBAAgB,EAAE,oBAAoB;IACtC,iBAAiB,EAAE,qBAAqB;IACxC,aAAa,EAAE,iBAAiB;CAChC,CAAC;AAUK,MAAM,mBAAmB,GAAG,CAAC,KAA4B,EAAsB,EAAE,CACvF,QAAA,kBAAkB,CAAC,MAAM,CACxB,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,KAAK,CAAC,QAAA,yBAAyB,CAAC,KAAK,CAAC,CAAC,KAAK,UAAU,CACxE,CAAC;AAHU,QAAA,mBAAmB,GAAnB,mBAAmB,CAG7B"}

package/dist/policy-check/policy-cleared.d.ts

@@ -0,0 +1,15 @@
+import { brand } from './policy-brand';
+import type { EnforcementPoint, PolicyDecision, PolicyVersionRef } from './policy-check';
+export type PolicySubjectType = 'workflow' | 'credential';
+export type PolicySubject = {
+    readonly type: PolicySubjectType;
+    readonly id: string;
+};
+export type PolicyCleared<Point extends EnforcementPoint> = {
+    readonly [brand]: 'Use the policy enforcement service — a cleared action cannot be forged';
+    readonly point: Point;
+    readonly subject: PolicySubject;
+    readonly decision: PolicyDecision;
+    readonly policyVersions: readonly PolicyVersionRef[];
+};
+export declare function assertClearedFor(cleared: PolicyCleared<EnforcementPoint> | undefined, point: EnforcementPoint, subject: PolicySubject): void;

package/dist/policy-check/policy-cleared.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.assertClearedFor = assertClearedFor;
+const n8n_workflow_1 = require("n8n-workflow");
+const policy_brand_1 = require("./policy-brand");
+function assertClearedFor(cleared, point, subject) {
+    if (!cleared)
+        throw new n8n_workflow_1.UnexpectedError(`No policy clearance for ${point}`);
+    if (cleared[policy_brand_1.brand] === undefined || cleared.point !== point)
+        throw new n8n_workflow_1.UnexpectedError(`Clearance is not valid for ${point}`);
+    if (cleared.subject.type !== subject.type || cleared.subject.id !== subject.id)
+        throw new n8n_workflow_1.UnexpectedError(`Clearance is for ${cleared.subject.type} ${cleared.subject.id}, not ${subject.type} ${subject.id}`);
+}
+//# sourceMappingURL=policy-cleared.js.map

package/dist/policy-check/policy-cleared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-cleared.js","sourceRoot":"","sources":["../../src/policy-check/policy-cleared.ts"],"names":[],"mappings":";;;AAAA,+CAA+C;AAE/C,iDAAuC;AA+CvC,0BACC,OAAoD,EACpD,KAAuB,EACvB,OAAsB;IAEtB,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,8BAAe,CAAC,2BAA2B,KAAK,EAAE,CAAC,CAAC;IAC5E,IAAI,OAAO,CAAC,oBAAK,CAAC,KAAK,SAAS,IAAI,OAAO,CAAC,KAAK,KAAK,KAAK;QAC1D,MAAM,IAAI,8BAAe,CAAC,8BAA8B,KAAK,EAAE,CAAC,CAAC;IAClE,IAAI,OAAO,CAAC,OAAO,CAAC,IAAI,KAAK,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE;QAC7E,MAAM,IAAI,8BAAe,CACxB,oBAAoB,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,OAAO,CAAC,EAAE,SAAS,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,EAAE,CACnG,CAAC;AACJ,CAAC"}

package/dist/policy-check/policy-mint.d.ts

@@ -0,0 +1,8 @@
+import type { EnforcementPoint, PolicedWorkflow, PolicyDecision } from './policy-check';
+import type { PolicyCleared, PolicySubject } from './policy-cleared';
+export declare function mintPolicyCleared<Point extends EnforcementPoint>({ point, subject, decision, }: {
+    point: Point;
+    subject: PolicySubject;
+    decision: PolicyDecision;
+}): PolicyCleared<Point>;
+export declare function workflowSubject(workflow: PolicedWorkflow): PolicySubject;

package/dist/policy-check/policy-mint.js

@@ -0,0 +1,30 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mintPolicyCleared = mintPolicyCleared;
+exports.workflowSubject = workflowSubject;
+const n8n_workflow_1 = require("n8n-workflow");
+const node_crypto_1 = require("node:crypto");
+const policy_brand_1 = require("./policy-brand");
+function mintPolicyCleared({ point, subject, decision, }) {
+    const refusal = `Refusing to clear ${point} for ${subject.type} ${subject.id}`;
+    if (decision.violations.length > 0) {
+        throw new n8n_workflow_1.UnexpectedError(`${refusal}: decision has ${decision.violations.length} violation(s)`);
+    }
+    if (decision.checkErrors && decision.checkErrors.length > 0) {
+        throw new n8n_workflow_1.UnexpectedError(`${refusal}: ${decision.checkErrors.length} check(s) failed to run`);
+    }
+    return {
+        [policy_brand_1.brand]: 'Use the policy enforcement service — a cleared action cannot be forged',
+        point,
+        subject,
+        decision,
+        policyVersions: decision.policyVersions ?? [],
+    };
+}
+function workflowSubject(workflow) {
+    if (workflow.id !== null)
+        return { type: 'workflow', id: workflow.id };
+    const nodes = (0, node_crypto_1.createHash)('sha256').update(JSON.stringify(workflow.nodes)).digest('hex');
+    return { type: 'workflow', id: nodes };
+}
+//# sourceMappingURL=policy-mint.js.map

package/dist/policy-check/policy-mint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy-mint.js","sourceRoot":"","sources":["../../src/policy-check/policy-mint.ts"],"names":[],"mappings":";;;;AAAA,+CAA+C;AAC/C,6CAAyC;AAEzC,iDAAuC;AAYvC,2BAAkE,EACjE,KAAK,EACL,OAAO,EACP,QAAQ,GAKR;IACA,MAAM,OAAO,GAAG,qBAAqB,KAAK,QAAQ,OAAO,CAAC,IAAI,IAAI,OAAO,CAAC,EAAE,EAAE,CAAC;IAE/E,IAAI,QAAQ,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,8BAAe,CACxB,GAAG,OAAO,kBAAkB,QAAQ,CAAC,UAAU,CAAC,MAAM,eAAe,CACrE,CAAC;IACH,CAAC;IAID,IAAI,QAAQ,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC7D,MAAM,IAAI,8BAAe,CAAC,GAAG,OAAO,KAAK,QAAQ,CAAC,WAAW,CAAC,MAAM,yBAAyB,CAAC,CAAC;IAChG,CAAC;IAED,OAAO;QACN,CAAC,oBAAK,CAAC,EAAE,wEAAwE;QACjF,KAAK;QACL,OAAO;QACP,QAAQ;QACR,cAAc,EAAE,QAAQ,CAAC,cAAc,IAAI,EAAE;KAC7C,CAAC;AACH,CAAC;AAGD,yBAAgC,QAAyB;IACxD,IAAI,QAAQ,CAAC,EAAE,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC;IAGvE,MAAM,KAAK,GAAG,IAAA,wBAAU,EAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAExF,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC;AACxC,CAAC"}

package/dist/pubsub/pubsub-metadata.d.ts

@@ -1,6 +1,6 @@
 import type { InstanceRole, InstanceType } from '@n8n/constants';
 import type { EventHandler } from '../types';
-export type PubSubEventName = 'add-webhooks-triggers-and-pollers' | 'remove-triggers-and-pollers' | 'clear-test-webhooks' | 'display-workflow-activation' | 'display-workflow-deactivation' | 'display-workflow-activation-error' | 'display-workflow-publication-status' | 'workflow-publish-wake-up' | 'community-package-install' | 'community-package-uninstall' | 'community-package-update' | 'get-worker-status' | 'stop-execution' | 'reload-external-secrets-providers' | 'reload-license' | 'reload-oidc-config' | 'reload-saml-config' | 'reload-overwrite-credentials' | 'response-to-get-worker-status' | 'restart-event-bus' | 'relay-execution-lifecycle-event' | 'relay-agent-execution-update' | 'relay-chat-stream-event' | 'relay-instance-ai-event' | 'relay-instance-ai-task-control' | 'relay-chat-human-message' | 'relay-chat-message-edit' | 'reload-sso-provisioning-configuration' | 'reload-source-control-config' | 'reload-mcp-registry' | 'reload-otel-config' | 'reload-instance-ai-settings' | 'cancel-test-run' | 'cancel-collection' | 'agent-chat-integration-changed' | 'agent-chat-subscription-changed' | 'agent-chat-leader-channel-request' | 'agent-chat-leader-channel-result' | 'agent-config-changed' | 'agent-tasks-changed' | 'redaction-floor-changed';
+export type PubSubEventName = 'add-webhooks-triggers-and-pollers' | 'remove-triggers-and-pollers' | 'clear-test-webhooks' | 'display-workflow-activation' | 'display-workflow-deactivation' | 'display-workflow-activation-error' | 'display-workflow-publication-status' | 'workflow-publish-wake-up' | 'community-package-install' | 'community-package-uninstall' | 'community-package-update' | 'get-worker-status' | 'stop-execution' | 'reload-external-secrets-providers' | 'reload-license' | 'reload-oidc-config' | 'reload-saml-config' | 'reload-overwrite-credentials' | 'response-to-get-worker-status' | 'restart-event-bus' | 'relay-execution-lifecycle-event' | 'relay-agent-execution-update' | 'resume-agent-workflow-tool' | 'relay-chat-stream-event' | 'relay-instance-ai-event' | 'relay-instance-ai-task-control' | 'relay-chat-human-message' | 'relay-chat-message-edit' | 'reload-sso-provisioning-configuration' | 'reload-source-control-config' | 'reload-mcp-registry' | 'reload-otel-config' | 'reload-instance-ai-settings' | 'cancel-test-run' | 'cancel-collection' | 'agent-chat-integration-changed' | 'agent-chat-subscription-changed' | 'agent-chat-leader-channel-request' | 'agent-chat-leader-channel-result' | 'agent-config-changed' | 'cancel-agent-background-job' | 'agent-tasks-changed' | 'redaction-floor-changed';
 export type PubSubEventFilter = {
     instanceType: 'main';
     instanceRole?: Omit<InstanceRole, 'unset'>;

package/dist/pubsub/pubsub-metadata.js.map

@@ -1 +1 @@
-{"version":3,"file":"pubsub-metadata.js","sourceRoot":"","sources":["../../src/pubsub/pubsub-metadata.ts"],"names":[],"mappings":";;;;;;;;;AACA,gCAAkC;AA4D3B,IAAM,cAAc,GAApB,MAAM,cAAc;IAApB;QACW,aAAQ,GAAyB,EAAE,CAAC;IAStD,CAAC;IAPA,QAAQ,CAAC,OAA2B;QACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,WAAW;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;CACD,CAAA;;yBAVY,cAAc;IAD1B,IAAA,YAAO,GAAE;GACG,cAAc,CAU1B"}
+{"version":3,"file":"pubsub-metadata.js","sourceRoot":"","sources":["../../src/pubsub/pubsub-metadata.ts"],"names":[],"mappings":";;;;;;;;;AACA,gCAAkC;AA8D3B,IAAM,cAAc,GAApB,MAAM,cAAc;IAApB;QACW,aAAQ,GAAyB,EAAE,CAAC;IAStD,CAAC;IAPA,QAAQ,CAAC,OAA2B;QACnC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAED,WAAW;QACV,OAAO,IAAI,CAAC,QAAQ,CAAC;IACtB,CAAC;CACD,CAAA;;yBAVY,cAAc;IAD1B,IAAA,YAAO,GAAE;GACG,cAAc,CAU1B"}

package/dist/replayable-registry.d.ts

@@ -0,0 +1,11 @@
+export declare class ReplayableRegistry<T> {
+    private readonly entryName;
+    private readonly describe;
+    private readonly entries;
+    private onRegister?;
+    constructor(entryName: string, describe: (entry: T) => string);
+    register(entry: T): void;
+    subscribe(listener: (entry: T) => void): void;
+    protected getEntries(): T[];
+    private notify;
+}

package/dist/replayable-registry.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ReplayableRegistry = void 0;
+const n8n_workflow_1 = require("n8n-workflow");
+class ReplayableRegistry {
+    constructor(entryName, describe) {
+        this.entryName = entryName;
+        this.describe = describe;
+        this.entries = [];
+    }
+    register(entry) {
+        this.entries.push(entry);
+        if (this.onRegister)
+            this.notify(this.onRegister, entry);
+    }
+    subscribe(listener) {
+        if (this.onRegister) {
+            throw new n8n_workflow_1.UnexpectedError(`A listener is already subscribed to ${this.entryName} registrations`);
+        }
+        for (const entry of this.entries) {
+            this.notify(listener, entry);
+        }
+        this.onRegister = listener;
+    }
+    getEntries() {
+        return [...this.entries];
+    }
+    notify(listener, entry) {
+        try {
+            listener(entry);
+        }
+        catch (error) {
+            throw new n8n_workflow_1.UnexpectedError(`Failed to handle the registration of ${this.entryName} "${this.describe(entry)}"`, { cause: error });
+        }
+    }
+}
+exports.ReplayableRegistry = ReplayableRegistry;
+//# sourceMappingURL=replayable-registry.js.map

package/dist/replayable-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replayable-registry.js","sourceRoot":"","sources":["../src/replayable-registry.ts"],"names":[],"mappings":";;;AAAA,+CAA+C;AAW/C;IAUC,YACkB,SAAiB,EACjB,QAA8B;QAD9B,cAAS,GAAT,SAAS,CAAQ;QACjB,aAAQ,GAAR,QAAQ,CAAsB;QAX/B,YAAO,GAAQ,EAAE,CAAC;IAYhC,CAAC;IAEJ,QAAQ,CAAC,KAAQ;QAChB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,IAAI,CAAC,UAAU;YAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;IAC1D,CAAC;IAED,SAAS,CAAC,QAA4B;QACrC,IAAI,IAAI,CAAC,UAAU,EAAE,CAAC;YACrB,MAAM,IAAI,8BAAe,CACxB,uCAAuC,IAAI,CAAC,SAAS,gBAAgB,CACrE,CAAC;QACH,CAAC;QAED,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YAClC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QAC9B,CAAC;QAKD,IAAI,CAAC,UAAU,GAAG,QAAQ,CAAC;IAC5B,CAAC;IAES,UAAU;QACnB,OAAO,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAOO,MAAM,CAAC,QAA4B,EAAE,KAAQ;QACpD,IAAI,CAAC;YACJ,QAAQ,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,IAAI,8BAAe,CACxB,wCAAwC,IAAI,CAAC,SAAS,KAAK,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,EAClF,EAAE,KAAK,EAAE,KAAK,EAAE,CAChB,CAAC;QACH,CAAC;IACF,CAAC;CACD"}

package/dist/system-task/index.d.ts

@@ -0,0 +1,3 @@
+export { SystemTask, resolveSystemTaskRunOptions } from './system-task';
+export type { SystemTaskClass, SystemTaskEffects, SystemTaskRunOptions, SystemTaskSchedule, } from './system-task';
+export { SystemTaskMetadata } from './system-task-metadata';

package/dist/system-task/index.js

@@ -0,0 +1,9 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SystemTaskMetadata = exports.resolveSystemTaskRunOptions = exports.SystemTask = void 0;
+var system_task_1 = require("./system-task");
+Object.defineProperty(exports, "SystemTask", { enumerable: true, get: function () { return system_task_1.SystemTask; } });
+Object.defineProperty(exports, "resolveSystemTaskRunOptions", { enumerable: true, get: function () { return system_task_1.resolveSystemTaskRunOptions; } });
+var system_task_metadata_1 = require("./system-task-metadata");
+Object.defineProperty(exports, "SystemTaskMetadata", { enumerable: true, get: function () { return system_task_metadata_1.SystemTaskMetadata; } });
+//# sourceMappingURL=index.js.map

package/dist/system-task/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/system-task/index.ts"],"names":[],"mappings":";;;AAAA,6CAAwE;AAA/D,yGAAA,UAAU,OAAA;AAAE,0HAAA,2BAA2B,OAAA;AAOhD,+DAA4D;AAAnD,0HAAA,kBAAkB,OAAA"}

package/dist/system-task/system-task-metadata.d.ts

@@ -0,0 +1,6 @@
+import { ReplayableRegistry } from '../replayable-registry';
+import type { SystemTaskClass } from './system-task';
+export declare class SystemTaskMetadata extends ReplayableRegistry<SystemTaskClass> {
+    constructor();
+    getClasses(): SystemTaskClass[];
+}

package/dist/system-task/system-task-metadata.js

@@ -0,0 +1,28 @@
+"use strict";
+var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
+    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
+    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
+    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
+    return c > 3 && r && Object.defineProperty(target, key, r), r;
+};
+var __metadata = (this && this.__metadata) || function (k, v) {
+    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SystemTaskMetadata = void 0;
+const di_1 = require("@n8n/di");
+const replayable_registry_1 = require("../replayable-registry");
+let SystemTaskMetadata = class SystemTaskMetadata extends replayable_registry_1.ReplayableRegistry {
+    constructor() {
+        super('system task', (taskClass) => taskClass.name);
+    }
+    getClasses() {
+        return this.getEntries();
+    }
+};
+exports.SystemTaskMetadata = SystemTaskMetadata;
+exports.SystemTaskMetadata = SystemTaskMetadata = __decorate([
+    (0, di_1.Service)(),
+    __metadata("design:paramtypes", [])
+], SystemTaskMetadata);
+//# sourceMappingURL=system-task-metadata.js.map

package/dist/system-task/system-task-metadata.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-task-metadata.js","sourceRoot":"","sources":["../../src/system-task/system-task-metadata.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gCAAkC;AAElC,gEAA4D;AAIrD,IAAM,kBAAkB,GAAxB,MAAM,kBAAmB,SAAQ,wCAAmC;IAC1E;QACC,KAAK,CAAC,aAAa,EAAE,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrD,CAAC;IAED,UAAU;QACT,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;IAC1B,CAAC;CACD,CAAA;;6BARY,kBAAkB;IAD9B,IAAA,YAAO,GAAE;;GACG,kBAAkB,CAQ9B"}

package/dist/system-task/system-task.d.ts

@@ -0,0 +1,22 @@
+import { ScheduledJobMisfirePolicy, type OneOffDefinition, type ScheduleDefinition } from '@n8n/constants';
+import { type Constructable } from '@n8n/di';
+export type SystemTaskEffects = 'idempotent' | 'non-idempotent';
+export type SystemTaskSchedule = Exclude<ScheduleDefinition, OneOffDefinition>;
+export interface SystemTask {
+    readonly name: string;
+    readonly schedule: SystemTaskSchedule;
+    readonly effects: SystemTaskEffects;
+    readonly durable: boolean;
+    readonly misfirePolicy?: ScheduledJobMisfirePolicy;
+    readonly misfireGraceSeconds?: number;
+    readonly maxAttempts?: number;
+    run(): Promise<void>;
+}
+export interface SystemTaskRunOptions {
+    misfirePolicy: ScheduledJobMisfirePolicy;
+    misfireGraceSeconds: number;
+    maxAttempts: number;
+}
+export declare function resolveSystemTaskRunOptions(task: SystemTask): SystemTaskRunOptions;
+export type SystemTaskClass = Constructable<SystemTask>;
+export declare const SystemTask: () => <T extends SystemTaskClass>(target: T) => T;

package/dist/system-task/system-task.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SystemTask = void 0;
+exports.resolveSystemTaskRunOptions = resolveSystemTaskRunOptions;
+const constants_1 = require("@n8n/constants");
+const di_1 = require("@n8n/di");
+const n8n_workflow_1 = require("n8n-workflow");
+const system_task_metadata_1 = require("./system-task-metadata");
+const SYSTEM_TASK_RUN_OPTION_DEFAULTS = {
+    idempotent: {
+        misfirePolicy: constants_1.ScheduledJobMisfirePolicy.Coalesce,
+        maxAttempts: 3,
+    },
+    'non-idempotent': {
+        misfirePolicy: constants_1.ScheduledJobMisfirePolicy.Skip,
+        maxAttempts: 1,
+    },
+};
+function resolveSystemTaskRunOptions(task) {
+    const defaults = SYSTEM_TASK_RUN_OPTION_DEFAULTS[task.effects];
+    const options = {
+        misfirePolicy: task.misfirePolicy ?? defaults.misfirePolicy,
+        misfireGraceSeconds: task.misfireGraceSeconds ?? constants_1.DEFAULT_MISFIRE_GRACE_SECONDS,
+        maxAttempts: task.maxAttempts ?? defaults.maxAttempts,
+    };
+    assertInRange(task.name, 'maxAttempts', options.maxAttempts, 1);
+    assertInRange(task.name, 'misfireGraceSeconds', options.misfireGraceSeconds, 1);
+    return options;
+}
+const MAX_INT32 = 2_147_483_647;
+function assertInRange(taskName, field, value, min) {
+    if (Number.isInteger(value) && value >= min && value <= MAX_INT32)
+        return;
+    throw new n8n_workflow_1.UnexpectedError(`System task "${taskName}" declares ${field} as ${value}, but it must be an integer between ${min} and ${MAX_INT32}`);
+}
+const SystemTask = () => (target) => {
+    (0, di_1.Service)()(target);
+    di_1.Container.get(system_task_metadata_1.SystemTaskMetadata).register(target);
+    return target;
+};
+exports.SystemTask = SystemTask;
+//# sourceMappingURL=system-task.js.map

package/dist/system-task/system-task.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"system-task.js","sourceRoot":"","sources":["../../src/system-task/system-task.ts"],"names":[],"mappings":";;;;AAAA,8CAKwB;AACxB,gCAAiE;AACjE,+CAA+C;AAE/C,iEAA4D;AAqE5D,MAAM,+BAA+B,GAGjC;IACH,UAAU,EAAE;QACX,aAAa,EAAE,qCAAyB,CAAC,QAAQ;QACjD,WAAW,EAAE,CAAC;KACd;IAED,gBAAgB,EAAE;QACjB,aAAa,EAAE,qCAAyB,CAAC,IAAI;QAC7C,WAAW,EAAE,CAAC;KACd;CACD,CAAC;AAOF,qCAA4C,IAAgB;IAC3D,MAAM,QAAQ,GAAG,+BAA+B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAE/D,MAAM,OAAO,GAAG;QACf,aAAa,EAAE,IAAI,CAAC,aAAa,IAAI,QAAQ,CAAC,aAAa;QAC3D,mBAAmB,EAAE,IAAI,CAAC,mBAAmB,IAAI,yCAA6B;QAC9E,WAAW,EAAE,IAAI,CAAC,WAAW,IAAI,QAAQ,CAAC,WAAW;KACrD,CAAC;IAQF,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;IAChE,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,qBAAqB,EAAE,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAC,CAAC;IAEhF,OAAO,OAAO,CAAC;AAChB,CAAC;AAGD,MAAM,SAAS,GAAG,aAAa,CAAC;AAEhC,SAAS,aAAa,CAAC,QAAgB,EAAE,KAAa,EAAE,KAAa,EAAE,GAAW;IACjF,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,GAAG,IAAI,KAAK,IAAI,SAAS;QAAE,OAAO;IAE1E,MAAM,IAAI,8BAAe,CACxB,gBAAgB,QAAQ,cAAc,KAAK,OAAO,KAAK,uCAAuC,GAAG,QAAQ,SAAS,EAAE,CACpH,CAAC;AACH,CAAC;AAiBM,MAAM,UAAU,GACtB,GAAG,EAAE,CACL,CAA4B,MAAS,EAAK,EAAE;IAI3C,IAAA,YAAO,GAAE,CAAC,MAAM,CAAC,CAAC;IAClB,cAAS,CAAC,GAAG,CAAC,yCAAkB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACnD,OAAO,MAAM,CAAC;AACf,CAAC,CAAC;AATU,QAAA,UAAU,GAAV,UAAU,CASpB"}

package/package.json

@@ -1,9 +1,21 @@
 {
   "name": "@n8n/decorators",
-  "version": "1.37.2",
+  "version": "1.38.1",
   "main": "dist/index.js",
   "module": "src/index.ts",
   "types": "dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./src/index.ts",
+      "require": "./dist/index.js"
+    },
+    "./policy-internal": {
+      "types": "./dist/policy-check/policy-mint.d.ts",
+      "import": "./src/policy-check/policy-mint.ts",
+      "require": "./dist/policy-check/policy-mint.js"
+    }
+  },
   "files": [
     "dist/**/*",
     "LICENSE_EE.md",
@@ -15,16 +27,16 @@
     "typescript": "7.0.2",
     "vitest": "^4.1.9",
     "zod": "3.25.76",
-    "@n8n/vitest-config": "1.21.0",
-    "@n8n/typescript-config": "1.10.0"
+    "@n8n/typescript-config": "1.11.0",
+    "@n8n/vitest-config": "1.21.0"
   },
   "dependencies": {
     "lodash": "4.18.1",
-    "@n8n/permissions": "0.74.1",
+    "@n8n/constants": "0.37.1",
+    "@n8n/permissions": "0.75.1",
     "@n8n/di": "0.16.0",
-    "@n8n/constants": "0.36.1",
-    "@n8n/api-types": "1.37.2",
-    "n8n-workflow": "2.37.2"
+    "n8n-workflow": "2.38.1",
+    "@n8n/api-types": "1.38.1"
   },
   "license": "SEE LICENSE IN LICENSE.md",
   "homepage": "https://n8n.io",